DEV Community

Wen Ping profile picture

Wen Ping

Software engineer. I write about build systems, CI, and the production bugs that only show up after a release.

Joined Joined on  github website
How to export security scan reports as frozen snapshots

How to export security scan reports as frozen snapshots

Comments
5 min read

Want to connect with Wen Ping?

Create an account to connect with Wen Ping. You can also sign in below to proceed if you already have an account.

Already have an account? Sign in
Replace Semgrep, Trivy, and Gitleaks scripts with one scan gate

Replace Semgrep, Trivy, and Gitleaks scripts with one scan gate

Comments
5 min read
Updating the vuln DB on an intranet: offline bundles and rollback

Updating the vuln DB on an intranet: offline bundles and rollback

Comments
6 min read
What scan records auditors ask for (MLPS / supply chain)

What scan records auditors ask for (MLPS / supply chain)

Comments
5 min read
Capability-scoped reports: SAST, deps, images, secrets, licenses

Capability-scoped reports: SAST, deps, images, secrets, licenses

Comments
4 min read
Ask about highs, findings, and gates in chat: wiring AngusSecurity MCP

Ask about highs, findings, and gates in chat: wiring AngusSecurity MCP

Comments
10 min read
Publish a public artifact portal: anonymous /explore install commands

Publish a public artifact portal: anonymous /explore install commands

Comments
4 min read
When npmjs is flaky in China: switch to a team registry with PROXY cache

When npmjs is flaky in China: switch to a team registry with PROXY cache

Comments
5 min read
Start a free cloud Docker registry: push, pull, and public browse

Start a free cloud Docker registry: push, pull, and public browse

Comments
5 min read
Start a free cloud npm private registry: from publish to public distribution

Start a free cloud npm private registry: from publish to public distribution

Comments
6 min read
Read-only artifact queries for AI assistants: wiring AngusRepo MCP

Read-only artifact queries for AI assistants: wiring AngusRepo MCP

1
Comments
5 min read
AngusRepo cache architecture, in practice

AngusRepo cache architecture, in practice

1
Comments
19 min read
How to store installers and binaries: path layout and curl download

How to store installers and binaries: path layout and curl download

1
Comments
4 min read
How to use a private PyPI index: from install to twine upload and pip install

How to use a private PyPI index: from install to twine upload and pip install

1
Comments
4 min read
How to set up a Maven private repository: from install to settings.xml, HOSTED, PROXY, and GROUP

How to set up a Maven private repository: from install to settings.xml, HOSTED, PROXY, and GROUP

1
Comments
4 min read
How to use a private Docker registry: from install to login, push, and certificates

How to use a private Docker registry: from install to login, push, and certificates

Comments
4 min read
How to set up a private npm registry: from install to .npmrc, scope, and publish

How to set up a private npm registry: from install to .npmrc, scope, and publish

1
Comments
6 min read
How to roll out a supply-chain gate: SBOM, then VEX, then refuse download

How to roll out a supply-chain gate: SBOM, then VEX, then refuse download

2
Comments 1
5 min read
Publish a public artifact portal: anonymous /explore install commands

Publish a public artifact portal: anonymous /explore install commands

2
Comments
4 min read
How to choose an artifact repository: Nexus, Artifactory, and self-hosted AngusRepo by team size

How to choose an artifact repository: Nexus, Artifactory, and self-hosted AngusRepo by team size

2
Comments
10 min read
How to block vulnerable and non-compliant artifacts at admission

How to block vulnerable and non-compliant artifacts at admission

1
Comments
6 min read
AngusRepo: Enterprise Multi-Format Artifact Repository | Unified Management for Maven/Docker/npm and 10+ Formats

AngusRepo: Enterprise Multi-Format Artifact Repository | Unified Management for Maven/Docker/npm and 10+ Formats

2
Comments
11 min read
Replace Harbor, npm Registry, and Nexus with One Repository: AngusRepo vs Nexus vs Artifactory

Replace Harbor, npm Registry, and Nexus with One Repository: AngusRepo vs Nexus vs Artifactory

2
Comments 1
8 min read
Connect 10 formats to one artifact service: Maven, Docker, npm, PyPI, and Helm

Connect 10 formats to one artifact service: Maven, Docker, npm, PyPI, and Helm

2
Comments 1
8 min read
loading...